Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

copy url from application pages

Posted on 2004-10-08
5
120 Views
Last Modified: 2013-12-24
I have an application that people need to log into.  If you log in and then go to the address bar - you copy the url - close the browser (this ends the session) Open IE and then paste the copied url into the address bar - you get right into the application - no login screen!  Anyone know why the application.cfm is not controlling this?
Thanks!
0
Comment
Question by:ahillman
5 Comments
 
LVL 5

Expert Comment

by:smaglio81
ID: 12262671
I am not sure. These types of things sometimes have a variety of causes. I think it might help narrow down the possibilities if we had a better idead of what was going on in Application.cfm. What kind of verification algorithm are you using. Did you write your own session management code, or are you using <cflogin>/<cflogout>?

Steven
0
 
LVL 6

Expert Comment

by:reitzen
ID: 12262853
We store the session info in the client scope and the session scope and compare each call via the application.cfm.  If the two values don't match, we assume the user has closed their browser and need to login again.

application.cfm
<cfif Client.browserSession NEQ session.SessionID>
  <cflocation url="login.cfm">
</cfif>

Once the user has been authenticated in the login.cfm
<cfif IsDefined("cookie.jsessionid")>
  <cfset Client.browserSession = cookie.jsessionid>
</cfif>

HTH
0
 
LVL 17

Expert Comment

by:Tacobell777
ID: 12263012
yes, because the user did not log out, i.e. the variables still exist
closing the browser does not end the session, the session variables still exist in memory on the server - users accesses the application again and the cookie still exists on the users machine, so its just like they never been gone.

You can set cookies to expire when the browser closes, and when they access the application again it should not let them in, however the session variables still exists in memory on the server if they have not explicitly been destroyed (ofcourse they will time out after the period defined in the application tag)..
0
 
LVL 17

Accepted Solution

by:
Tacobell777 earned 125 total points
ID: 12263026
0
 

Author Comment

by:ahillman
ID: 12275313
Makes lots of sense - I was under the impression that the session is killed when the browser is closed - wrong assumption obviously.  So - lets say i decided to bookmark or save a url that would take me directly into the application at a later date.  This wouldn't work after the session has ended on my server correct?  Good to know.  If I wanted to have the session end when the browser is closed and have the cookie go away at the same time - what would be the proper coding? This isn't a security risk for this particular application but could be for another one that is in the works.
Thanks!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A web service (http://en.wikipedia.org/wiki/Web_service) is a software related technology that facilitates machine-to-machine interaction over a network. This article helps beginners in creating and consuming a web service using the ColdFusion Ma…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question